Now, I want to show you an example of this, because in my opinion, the story is much more dangerous
in this case.
The reason being is you don't have to send anything.
The code will actually be executed in the third page.
Now, these are just old codes that I have injected.
The code will be executed, will be stored in this page so that every person that just visits this page,
you don't have to actually send anything to any person.
Whenever someone visits this page.
The code will be executed.
Another thing is that you won't have this suspicious code in the your URL.
So, again, you can you can just go ahead and send us your URL if you really want it to someone to
visit it.
But the URL is just going to look as a normal URL.
And keep in mind, if you find this vulnerability in a famous website or an atrocity website, then
people will visit it without even thinking twice about it.
So they'll just click on it.
No problem at all.
So we're going to inject it again, the same way that we were injecting in our video about the story,
so I'm just going to set the name to beef.
And then we're going to put our coat in here, so we're going to put our exploit in here.
I'm just going to copy it again from here.
This field actually doesn't let you write more than 10 characters, I think, and it's over 100, so
we're just going to right.
Click and inspect element.
And we've got to set the max length to 500.
Like so and that'll allow us to write more characters, so just go back and paste it in here.
And we're ready to go.
I'm going to sign the guestbook.
OK, and that should be running, so now you can just go ahead and send this URL instead of the suspicious
one that we were seeing in the reflected case.
So you can literally just send us your e-mail to anybody that you want your code to run on their computer.
And once they click it, you'll get them hooked to beef.
Or you can just wait for people to visit that you are normally as if they're browsing that website or
whatever.
Once they click on that URL, they'll be hooked to your beef.
And again, like I said before, if the website is famous, if the website has a lot of visitors, they
will be clicking on that.
Another plus is the Web admin probably going to be visiting his websites, Web pages every now and then.
So again, you'll get you'll get him hooked and you'll be able to hack him and then maybe gain full
access to the server or to the website through this access.
So I'm going to go to my Windows machine.
And I'm going to run my browser.
And I'm going to go to the TV and I'm just going to pretend I'm a normal user, so.
And we're going to go to David A.
In.
So I'm just going to go on the security and I'm going to set it too low because on high and nothing,
nothing's going to work.
And notice now I'm going to just click on the exercise today, so I'm just pretending to be a normal
person, browsing through Web pages, and I'm going to just come across a website, a Web page that
is vulnerable to a story that says I could be the Web admin as well, just clicking on my own page.
And you can see these are just the odd exploits, the old exercises.
And now this browser should be hooked without even clicking on anything suspicious.
Again, you can see this is normal.
They didn't really receive anything or anybody asking them to click on anything.
But if we go to our beef here, you'll see that we have a Windows machine.
So this is my Linux machine and you can see that we have a Windows machine here.
Now, the Windows icon, we can see the IP address of the Windows machine.
And this machine is hooked now, so if you click on it, it's online and we can run all the commands
that this allows us to do.